Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/4/323830343a366566303a3a2f33322d3438203d3e20323730363238.roa
File:                     323830343a366566303a3a2f33322d3438203d3e20323730363238.roa (raw, json)
Hash identifier:          hgg0t3BjYHjvrwXyQKJTWMDyxS/VY8ip5wvMTXLHWps=
Subject key identifier:   AE:0C:0B:C0:C3:17:35:70:73:32:62:5B:22:73:02:8F:C8:06:13:79
Certificate issuer:       /CN=A5073EB1E427A3F5329F0966AD6155C0B7F34BF8
Certificate serial:       0D1B916DD715C739B70AC096F94A2B07A40C4D1F
Authority key identifier: A5:07:3E:B1:E4:27:A3:F5:32:9F:09:66:AD:61:55:C0:B7:F3:4B:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5073EB1E427A3F5329F0966AD6155C0B7F34BF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/4/323830343a366566303a3a2f33322d3438203d3e20323730363238.roa
Signing time:             Wed 17 May 2023 13:41:59 +0000
ROA not before:           Wed 17 May 2023 13:36:59 +0000
ROA not after:            Fri 17 May 2024 13:41:59 +0000
asID:                     270628
IP address blocks:        2804:6ef0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1b:91:6d:d7:15:c7:39:b7:0a:c0:96:f9:4a:2b:07:a4:0c:4d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5073EB1E427A3F5329F0966AD6155C0B7F34BF8
        Validity
            Not Before: May 17 13:36:59 2023 GMT
            Not After : May 17 13:41:59 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:70:2c:c1:2e:41:12:a3:c0:b3:05:11:dc:0b:
                    56:e4:5b:57:4f:e0:df:08:2b:59:cf:a4:fd:89:cf:
                    cc:30:8e:0d:73:bc:e0:07:bb:58:36:bc:05:45:38:
                    3e:fc:49:3a:03:4f:4d:a4:1e:10:0b:7c:0b:0c:62:
                    99:3e:ff:7f:da:40:d0:98:dc:17:9d:1b:39:4e:38:
                    fb:eb:94:51:72:d7:30:e7:18:ea:de:db:06:1e:ef:
                    fc:f4:55:27:b4:0b:a7:c4:61:86:9c:75:07:00:47:
                    60:d4:5a:c8:89:78:e2:5f:df:38:74:a7:07:fa:43:
                    68:5b:47:ec:ae:e6:b1:4f:bb:f7:7f:f0:33:69:f0:
                    5c:c2:4e:84:24:12:c3:31:6e:1c:ed:19:4d:d8:12:
                    50:b9:cf:a6:0b:86:6e:d4:7b:19:bc:5f:2b:c4:47:
                    f8:7b:de:86:c2:7f:1f:f5:a2:f1:0f:a9:41:82:90:
                    96:be:e2:e5:c0:ac:67:a0:9f:4a:1a:8c:9e:6d:15:
                    85:2b:15:cc:d9:9b:a0:69:a2:31:5d:74:1c:95:14:
                    a4:fc:29:42:24:3d:f5:aa:52:2b:c5:70:4a:55:00:
                    08:32:74:30:87:3a:9f:80:10:78:9a:d3:71:6f:e5:
                    f0:f9:11:c7:61:2e:0f:f3:b9:8f:c0:75:43:5d:7c:
                    19:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0C:0B:C0:C3:17:35:70:73:32:62:5B:22:73:02:8F:C8:06:13:79
            X509v3 Authority Key Identifier:
                keyid:A5:07:3E:B1:E4:27:A3:F5:32:9F:09:66:AD:61:55:C0:B7:F3:4B:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/4/A5073EB1E427A3F5329F0966AD6155C0B7F34BF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5073EB1E427A3F5329F0966AD6155C0B7F34BF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/4/323830343a366566303a3a2f33322d3438203d3e20323730363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:86:35:87:53:6b:f5:20:96:61:9d:01:ae:c5:01:61:b6:58:
         8c:4a:f3:84:c8:22:36:43:90:a2:c0:9c:72:8e:6f:ca:1d:27:
         51:7b:dd:26:34:f4:85:c4:b8:72:cc:fa:44:d0:f6:d0:60:5f:
         4f:d4:ff:e9:9c:c5:fe:a3:23:b3:72:7d:ac:3c:77:19:ee:85:
         b2:ae:c9:57:13:c3:71:7a:a6:f9:85:9e:cb:72:b5:31:8f:1c:
         57:1a:e6:b0:2b:b1:34:8d:aa:60:e4:a0:ce:20:4d:26:46:7c:
         0e:dd:c6:be:ce:a6:81:aa:e0:da:da:4a:35:b3:88:22:91:af:
         43:82:e5:83:f6:11:28:a6:82:6e:1c:06:98:11:13:f9:b0:1f:
         c9:e9:6b:25:7f:43:c9:12:86:79:ab:f6:2b:67:24:e6:e2:e0:
         7c:33:19:a6:f6:f5:9b:5d:ad:bb:a0:1e:78:45:ba:5b:66:7d:
         b4:84:08:93:3a:16:c6:92:fd:77:30:bf:ff:78:36:be:d8:48:
         3c:cf:4c:61:7d:33:64:3e:3d:c9:bf:90:1b:c4:9f:d9:ef:e0:
         3f:c9:15:fd:90:9d:13:cb:5a:21:39:b5:fc:d5:e7:4f:69:c0:
         f0:ed:5d:e4:1d:04:41:66:0d:7c:2e:b9:db:82:ff:4b:43:b7:
         c9:63:62:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----